Siemens SIMATIC Cn 4100 vulnerabilities

8 CVEs affecting Siemens SIMATIC Cn 4100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-14831, published 2026-02-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9231, published 2025-09-30. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing…
CVE-2025-9232, published 2025-09-30. Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days. Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority…
CVE-2025-9230, published 2025-09-30. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may…
CVE-2025-14831, published 2026-02-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates…
CVE-2025-8916, published 2025-08-13. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API…
CVE-2025-7425, published 2025-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree…
CVE-2025-2884, published 2025-06-10. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See…
CVE-2025-9820, published 2026-01-26. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the…